Added token_auth and custom authorization with tests